READING 5—WEEK 5. 


Disinformation technology and "fake news" 


Aside from the interaction of individuals with courts and the increasing use of automated decision making by 
governments, there are other areas within the scope of the Bingham Centre Citizenship and the Rule of Law 
programme that are being radically and fundamentally affected by new technologies. This reading will briefly 


explore the notion of "disinformation". 


"Fake news" has become a very popular expression in public discourse, but it has taken on such a wide variety 
of meanings that it can be unhelpful for enabling a precise discussion. The UK House of Commons Digital, 
Culture, Media and Sport Committee published a report that considered the issue of fake news, and suggested 
that "disinformation" and "misinformation" were more useful terms for the phenomenon. 


In April 2019 the UK Government defined disinformation as "the deliberate creation and sharing of false and/or 
manipulated information that is intended to deceive and mislead audiences, either for the purposes of causing 
harm, or for political, personal or financial gain"; and defined misinformation as "the inadvertent sharing of false 
information". 


In the "Information Age", disinformation can lead to seemingly reputable (yet false) information being presented 
to the public at large in an attempt to influence the choices that we make and our perceptions of particular issues. 


Disinformation is most worrying in the context of digital advertising during political contests. 


The most innovative techniques employed by commercial advertisers have always been used to promote political 
candidates and parties, but there are significant differences between the methods currently deployed when 
compared against the primary methods of previous generations. 


Broadcasts on the television or radio are promoted to the public at large, whereas social media marketing targets 
individuals based on a sophisticated and nuanced understanding of their personal interests. Combining 


behavioural science with marketing knowledge, use of social media empowers digital marketers to create 
advertisements that produce profound psychological responses that can spur us to change our behaviour in 


the real world. 


Dr David Stillwell of the University of Cambridge Judge Business School conducted a study of 60,000 Facebook 
users and found that through analysis of the pages that they "liked" on the platform, it was possible to predict 
their self-defined personality traits with greater accuracy than their work colleagues, friends, family members 
and_almost_as well as their spouses. The precision and effectiveness of personal targeting becomes more 
problematic where false information is used to target individuals in order to shift their political opinions. Readers 
are encouraged to imagine how such tools could be manipulated for propaganda purposes. 








The most controversial recent use of social media advertising for political purposes is the case of a group of data 
analysis companies (Emerdata Ltd and SCL Ltd) popularly known as Cambridge Analytica. The group has 
drawn criticism for harvesting huge amounts of data from Facebook users, using that information for purposes 
that the users did not consent to, and targeting users with highly personalised political advertisements that utilise 
that information to affect them on a deep psychological level. 


Mr Justice Norris, a senior judge in the English and Welsh High Court, summarised Cambridge Analytica’s 
activities as follows: 





e The business purchased commercial data from multiple vendors 


e That data was analysed to create psychographic profiles of the individuals who were the subjects of the 
data, 

e Vast databases were compiled with that information (the judge found that the company held up to 2000 
points of data on each of over 230 million American voters, and that its UK companies held over 700 
terabytes of data, or 52 billion pages of information) 

e That data was used to facilitate targeted advertising and messaging (micro-targeting) 


These activities have been thought to fall short of the minimum European Union and UK legal requirements for 
the protection of individuals’ data, and the Cambridge Analytica companies were subsequently investigated by 
the Information Commissioner’s Office (ICO), the UK's independent body established to uphold information 
rights. The ICO conducted an extensive review of the use of data analytics in political campaigns and highlighted 
the following issues in an important report published in 2018: https://ico.org.uk/media/action-weve- 


taken/2259369/democracy-disrupted-110718.pdf: 











e Behavioural science models are increasingly being used by political parties 

e In the 21st century complex partnerships have developed between political parties, campaign groups, 
social media companies, data brokers and data analytics providers 

e There is a lack of transparency about how data will be used 

e Processing of data is often not fully compliant with data protection principles, particularly where political 
parties seek to use information drawn from public voting registers, social media and software to screen 
people’s names for likely ethnicity and age 

e A number of specific issues relating to Facebook enabling users to understand how and why they might 
be targeted by a political party or campaign 


The recommendations from the report were wide-ranging and included obligations for political parties to 
improve the transparency and legal compliance of their data use; information campaigns to inform the public 
about how their data would be used; the creation by the UK Government of a code of practice for the use of 
personal information in political campaigns; third party audits of data use after referendums; coalitions of 
international ICOs who would ensure online platforms’ compliance with EU laws; social media platforms rolling 
out transparency initiatives and finally a review of regulatory gaps in the regulation of content, its origins and the 
geographical scope of political advertising online. This final recommendation is addressed at the prevention 
of the spread of disinformation. 


Whilst this investigation proceeded, the ICO took a number of steps to address issues that arose concerning some 
of the companies and political parties involved. 


Major actions taken by the ICO include: 


e Fining Facebook 500,000 GBP (the maximum available penalty at the time) for enabling companies such 
as Cambridge Analytica to access users’ profiles in a manner that constituted a serious breach of data 
protection law, 

e Requiring SCL Elections, a company related to Cambridge Analytica, to provide an individual who 
requested information about the processing of his data with that data, 

e Prosecuting SCL Elections when the company did not comply with the above requirement, 

e Writing warning letters to eleven UK political parties requiring steps to be taken within three months. 


What does this have to do with the Rule of Law? 


We saw earlier this week in our video on Rule of Law Implications of Artificial Intelligence that it may be 





difficult to appeal a choice made by a public authority if the decision was made by an algorithm. Many of the 


complex data processing operations involved in hyper-targeted social media advertising are algorithmic in nature, 
and similar considerations apply. More importantly in this case, if you do not know how a data processor has 





used your information, or that they hold it at all, you will not be able to argue that you did not consent to that 


processing. By the point you come to realise that your information has been used in such a manner, the social 
media post, video or comment may have already triggered the reactions that the advertiser intended. 





The ICO describes this problem in a notice written to Aggregate IQ, a Cambridge Analytica-related company, to 
delete all the data it holds, on people in the UK. The ICO stated that the company had caused potential distress to 
the subjects of the data and had “denied the opportunity of properly understanding what personal data may be 
processed about them by the controller or being able to effectively exercise the various other rights in respect of 
that data.” 


Another Rule of Law question stems from the application of international legal regimes to businesses. It is very 
difficult to enforce domestic laws against truly ubiquitous companies such as Facebook that operate in most 
countries across the world_and_do not anchor themselves to traditional countries in_the_ same way as the 
companies of the pre-2000s era. This question of how to appropriately regulate the activities of tech companies 
and indeed large multi-national companies in general, will be considered in greater depth in the final week of the 
course. 











Finally, by filling users’ newsfeeds with information that is false, or in any case biased towards a particular 
perspective, agents of disinformation can skew our opinions with a level of success that has never been seen 
before, potentially compromising the fundamental right to freedom of thought that all states pledged to 
guarantee in Article 18 of the Universal Declaration of Human Rights. The international human_rights 
framework was created to_ensure_that the worst excesses of human rights abuses, including the flooding of 


citizens' minds with propaganda, could not be committed by states or other actors. The use of psychological 


techniques and improperly collected data about our passions, desires and fears could be said to undermine the 


extent to which our thought processes are the product of inputs that we choose to be exposed to. 
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